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CLAIMS 

What is claimed is: 



1 1. A method for providing access protection to 

2 electronic storage devices^ said method comprising the 

3 steps of: 

4 providing a hardware-level security code for a 

5 storage device on which is stored an electronic file to 

6 which restricted access is desired; and 

7 allowing access to said storage device only when a 
ij 8 user enters a user code that matches said security code. 



Ml 2. The method of Claim 1^ further comprising the steps 

y,2 of initializing said security code within a microcode of 

^^^3 said storage device, wherein access to said storage 

L.iu4 device is denied during said initializing step. 

1 3. The method of Claim 1, further comprising the step 

2 of defining an operating system (OS) extension and 

3 corresponding OS extension process by which said allowing 

4 step is implemented. 
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1 4, The method of Claim 3;. wherein said defining step 

2 includes: 

3 adding a hardware security code checking process to 

4 an OS operation for supporting a security code comparison 

5 with a user access code when a user requests a read and 

6 write on said storage device. 

1 5. The method of Claim 4^ further comprising the step 

2 of : 

€h evaluating via said hardware security code checking 

process said security code returned by said file 

nJs protocol; and 

Qe in response to said security code having a pre- 

yj determined default value ^ providing said user with 
unrestricted access to said storage device. 

1 6. The method of Claim 5, further comprising the step 

2 of comparing said security code with said user provided 

3 access code when said authentication code is not said 

4 pre-determined default value. 

1 7. The method of Claim 5, further comprising the step 

2 of outputting an access deny message of said user. 



AUS920000544US1 



-18- 



1 8. The method of Claim 1, further comprising the steps 

2 of : 

3 restricting a subsequent request for access to said 

4 storage device by a user when said security code does not 

5 match said user access code during an initial request by 

6 said user; and 



7 



terminating a job submitted by said user. 
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9. A computer program product comprising: 

a computer readable medium; and 

program instructions stored on said computer 
readable medium for implementing file access protection 
by: 

providing a security code for a drive on which 
is stored an electronic file to which restricted 
access is desired; and 

allowing access to said drive only when a user 
access code that matches said security code is 
provided. 

10. The computer program product of Claim 9, further 
comprising program instructions for initializing said 
security code within a microcode of said drive^ wherein 
access to said drive is denied during said initializing 
step . 

11. The computer program product of Claim 9, further 
comprising program instructions for implementing an 
operating system (OS) extension. 
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1 12. The computer program product of Claim 11^ further 

2 comprising program instructions for: 

3 adding a hardware security code checking process to 

4 an OS operation for supporting a security code comparison 

5 with a user access code when a user requests a read and 

6 write with respect to said storage device. 

1 13. The computer program product of Claim 12 ^ further 

2 comprising program instructions for: 

Jfe evaluating via said hardware security code checking 

process said security code returned by said file 
protocol; and 

06 in response to said security code having a pre- 

uj determined default value, providing said user with 

unrestricted access to said storage device. 



1 14. The computer program product of Claim 13, further 

2 comprising program instructions for comparing said 

3 security code with said user code when said security code 

4 is not said pre-determined default value . 

1 15. The computer program product of Claim 13, further 

2 comprising program instructions for outputting an access 

3 denied message of said user, and canceling the job 

4 submitted by said user. 
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1 16. The computer program product of Claim 15, further 

2 comprising program instructions for restricting a 

3 subsequent request for access to said storage device by a 

4 user when said security code does not match said user 

5 access code during an initial request by said user. 
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1 17 . A data processing system comprising: 

2 a processor; 

3 a memory linked to said processor via an 

4 interconnect; 

5 an input/output (I/O) device; 

6 a drive on which is stored one or more files for 

7 which restricted access is desired; and 

ygs an OS executing on said processor that provides 

,^|9 support for assigning a hardware-level security code for 

fw said drive and allows access to said file by user only 

ifi when a user entered access code matches said security 

Qi code . 

l^i 18. The data process system of Claim 17, wherein further 

O2 said OS includes an OS extension by which an assigning of 

'^'3 said security code and access to said drive are 

4 implemented. 

1 19. The data process system of Claim 18, wherein further 

2 said OS extension includes program instructions for: 

3 adding a hardware security code checking code to an 

4 OS operation for supporting a security code comparison 

5 with a user access code when a user requests a read and 

6 write on said drive; and 



AUS920000544US1 



-23- 



7 identifying specific locations on flash ROM or 

8 EEPROM that houses drive microcode on said drive for 

9 initializing said security code. 

1 20. The data process system of Claim 18^ wherein further 

2 said OS extension includes program instructions for: 

3 evaluating via said hardware security code checking 

4 process said security code returned by said file 

5 protocol; and 

C?6 in response to said security code having a pre- 

.^1? determined default value, providing said user with 

fUs unrestricted access to said drive. 

5^l 21. The data process system of Claim 20, wherein further 

flh said OS extension processes includes program instructions 

^^^^3 for comparing said authentication code with said user 

Ck entered access code when said authentication code is not 

"'''5 said pre-determined default value. 

1 22. The data process system of Claim 21, wherein further 

2 said OS extension further includes program instructions 

3 for outputting an access deny message to said user when 

4 said security code does not match said access code. 
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1 23. The data processing system of Claim 21, further 

2 comprising means for restricting a subsequent request for 

3 access to said storage device by a user when said 

4 security code does not match said user access code during 

5 an initial request by said user. 

1 24. A storage system comprising: 

2 a recordable medium for recording data; and 

a security code that is unique to said storage 

€k system and which protects said data recorded on said 

\^ recordable medium from unauthorized access. 

'^-■1 25. The storage system of Claim 24, further comprising: 
^2 an input /output mechanism; and 

^3 means for issuing said security code to a requesting 

4 operating system extension. 

1 26. The storage system of Claim 25, wherein said 

2 input/output mechanisms connects said storage system with 

3 a data accessing device. 

1 27. The storage system of Claim 26, wherein said data 

2 accessing device is a processor on which said requesting 

3 operating system process executes. 



